Vulnerability · Published Oct 1, 2026 · Assigned by Hitachi
CVE-2026-82825Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed
Critical 9.8
In plain English
A critical-severity missing authentication in Hitachi Coding Software Suite from Hitachi Industrial Equipment Systems. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Official description
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. This issue affects Hitachi Coding Software Suite: through 3.3.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hitachi Industrial Equipment Systems | Hitachi Coding Software Suite | 0 – through 3.3.0 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H